Privacy Policy

1. Data controller

Karma Software S.r.l.s., Piazza delle Camelie 3, 72100 Brindisi (BR), VAT and tax identification number 02417740749. For any queries concerning personal data, please email privacy@karma-software.com.

2. Data we process

• Browsing data: IP address, browser and device type, pages visited, and date and time of access, collected automatically by the systems that operate the website.
• Data you provide: first name, surname, role, company, email address, telephone number, postcode and town or city, contact preferences and the content of messages submitted through the demonstration and information request forms.
• Job application data: personal and contact details, area of interest, curriculum vitae and covering message.
• Partnership data: details of the company and its contact person, and the type of collaboration proposed.
• Cookies and similar technologies, as described in the Cookie Policy.

3. Purposes and legal bases

• Handling requests for demonstrations and information, and contacting you in response: taking steps at your request prior to entering into a contract (Article 6.1.b GDPR).
• Assessing speculative applications or applications for advertised vacancies: steps prior to entering into a contract (Article 6.1.b GDPR).
• Assessing partnership proposals: steps prior to entering into a contract and legitimate interests (Articles 6.1.b and 6.1.f GDPR).
• Ensuring the operation and security of the website and preventing misuse: legitimate interests (Article 6.1.f GDPR).
• Analytics and marketing through non-essential cookies: only with your consent (Article 6.1.a GDPR), which you may withdraw at any time.
• Complying with legal obligations: Article 6.1.c GDPR.

4. Data processed when providing KARS Claims

When a TPA uses KARS Claims, data relating to claims, insured persons, injured parties, appointed professionals and instructing insurers is processed by Karma Software as a data processor pursuant to Article 28 GDPR, on behalf of the TPA client, under the service agreement and the associated data processing agreement. Such processing falls outside the scope of this privacy notice: to exercise your rights in relation to that data, please contact the TPA or insurer handling your claim.

5. Processing methods and retention

Data is processed electronically on cloud infrastructure, with appropriate technical and organisational measures to ensure its confidentiality, integrity and availability.

We retain data relating to commercial enquiries for as long as necessary to handle them and, in any event, for no longer than 24 months after the last contact; job application data for no longer than 24 months; and browsing data for no longer than strictly necessary to ensure website security. Data is retained for longer only where required by law.

6. Recipients and transfers

Data may be processed by authorised Karma Software personnel and by suppliers supporting our operations (hosting, cloud infrastructure and email services), appointed as data processors. We do not sell your data to third parties.

Where a supplier processes data outside the European Economic Area, the transfer is based on European Commission adequacy decisions or standard contractual clauses.

7. Your rights

You may at any time request access to your data, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. You may withdraw your consent without affecting the lawfulness of processing carried out before its withdrawal. Please email privacy@karma-software.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it).

8. Changes

We may update this privacy notice; the current version is always published on this page together with the date of the last update.